
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/2C7C9DD2258E11F0B42E1529C4F9AE02.roa
File: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (raw, json)
Hash identifier: Xhmndf5ojRbPlnBHYgYgyJ2fjmYQp+txk1dvG9nv9jQ=
Subject key identifier: 0C:1F:82:44:95:C7:FA:55:B1:DD:A9:6E:6D:94:49:EC:C3:8F:54:F8
Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Certificate serial: 018A
Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/2C7C9DD2258E11F0B42E1529C4F9AE02.roa
Signing time: Thu 11 Jun 2026 07:34:48 +0000
ROA not before: Thu 11 Jun 2026 07:34:48 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 151627
IP address blocks: 103.25.10.0/23 maxlen: 23
103.25.10.0/24 maxlen: 24
103.25.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Validity
Not Before: Jun 11 07:34:48 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2a6518-2201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:93:4a:37:39:9f:c6:d6:99:b3:f4:87:72:
f6:c0:c9:83:b6:ed:57:d2:40:98:d1:d0:97:d9:85:
23:12:c4:f8:c9:ce:5a:ba:ed:df:6e:a0:6e:aa:5b:
bc:46:db:61:e4:35:72:8c:88:5f:24:5f:25:2e:78:
7f:2c:29:8c:08:f4:cb:b5:fb:97:67:59:1d:a0:35:
1c:0d:71:0e:6e:b5:8c:c2:7a:b1:36:84:1e:4d:3d:
5f:3e:b3:28:ba:b3:b8:08:7c:19:f5:1f:49:98:c4:
80:45:be:cd:97:e1:70:cb:47:d6:8a:90:47:fc:07:
9e:28:ee:57:8f:1a:2f:d8:49:ba:7e:fa:1d:1b:43:
63:56:dd:28:11:ae:8d:52:67:e3:e9:5a:fb:12:de:
1c:45:04:50:da:9b:de:ea:c7:e3:32:09:34:c5:b6:
9b:48:c6:6b:30:38:e0:e2:50:ba:01:8d:67:9c:71:
5d:42:0a:c8:02:76:08:24:2b:f8:63:15:c4:b3:23:
f3:c2:eb:01:b5:e9:55:84:7e:76:5b:36:62:79:3e:
03:f7:ce:79:69:c2:04:24:a8:88:ca:7a:ee:dc:5b:
40:61:af:ce:79:85:42:3d:96:0a:46:ed:6b:af:12:
9b:ab:1a:aa:b5:7d:8a:20:fa:37:e0:a5:cf:47:b0:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1F:82:44:95:C7:FA:55:B1:DD:A9:6E:6D:94:49:EC:C3:8F:54:F8
X509v3 Authority Key Identifier:
keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/2C7C9DD2258E11F0B42E1529C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.25.10.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:71:f1:92:25:89:14:13:88:8d:c1:11:41:13:a9:54:2c:e7:
82:5a:3c:9e:e3:f2:2f:84:8f:94:70:0d:66:0c:99:c1:2b:e1:
a8:e6:6c:5e:57:1b:b6:9f:7e:97:fe:f2:c4:6a:a6:2d:d9:85:
52:58:40:4e:d8:12:6f:01:b7:58:64:4d:50:51:1c:6b:97:33:
f4:8a:2b:09:63:1d:79:a7:39:d2:c3:4d:2e:3a:4c:48:13:2f:
a7:d5:de:91:f7:a1:9e:dd:54:37:c9:f5:cf:30:00:78:86:2f:
c1:c2:ac:7d:51:dd:39:23:c6:5c:ea:2c:e9:8b:34:69:df:2e:
48:cb:f2:d9:19:61:a1:ee:3e:30:8a:19:66:1e:73:33:49:23:
f7:2e:f2:4c:57:95:1f:09:9a:91:99:88:c5:0a:81:4c:b5:36:
1b:ef:a0:32:31:08:c4:e6:8c:08:7e:d8:25:ee:2d:ed:ef:b5:
27:a3:04:d4:d9:f3:be:2f:a9:f9:55:b0:41:d2:e8:2e:b5:08:
0d:c7:86:85:2f:27:0a:c2:c6:4e:75:91:d5:6e:08:0b:45:58:
93:d4:1c:9b:af:90:49:77:e2:1a:c2:e4:02:73:e2:5c:7c:0c:
5f:5f:d8:ef:cf:20:80:49:cf:56:c5:91:06:78:5a:0a:ec:88:
a8:32:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:12 2026 by rpki-client